Report of collision-generation with MD5

Oliver Eikemeier eikemeier at fillmore-labs.com
Thu Aug 26 01:37:19 PDT 2004


Mohacsi Janos wrote:
> [...]
> I would also opt for having (by default) additional hash algorithms. I 
> would prefer using method of NetBSD: using an external program called 
> digest ( see security/digest port) to select the algorithms. Oliver 
> Eikemeier is working a ports building infrastructure and I think it 
> would be a good idea to this new infrastructure would support multiple 
> hash algorithm. The most easiest way would be to define a knob like 
> PREFERED_HASH that would list the algorithms that system would prefer, 
> and REQUIRED_HASH that would be required to checked:
> - makesum should generate all the PREFERED_HASH
> - fetch should fail if any of the REQUIRED_HASH failed

devel/portmk supports generation of multiple hashes, although it will 
just verify the first of the sufficient ones. the problem is to test 
this stuff before 5.3.
-Oliver



More information about the freebsd-security mailing list